Event Type: SuccessAudit Event Source: Quest File Access Audit Source Event Category: Remote Access Event ID: 2049 Date: 10/28/2009 Time: 10:17:50 User: RESEARCH\CBrown Computer: SERVER Description: Object renamed: User Name: CBrown User Domain: RESEARCH User Logon ID: (0x0,0xF157E) User IP Address: 10.0.0.1 Object Type: Folder Object Path: C:\documents\New Folder New Name: C:\documents\baclup Transaction ID: